Activating an app makes it available to the workspace. Each workspace member still needs explicit access before they can open it — being a workspace Admin does not by itself grant access to every app.
Who can grant access
Only the workspace Owner can grant or revoke access to an app, and only the Owner can change a member's role inside an app. Workspace Admins do not have these permissions.
This is enforced on the route — non-Owner attempts redirect with an error.
Step-by-step
- Open
/my-apps. - Click the app you want to share.
- Inside the app detail view, find the Manage users / Access section.
- Pick a workspace member who doesn't have access yet, pick a role from the dropdown, and click Grant access.
The member can now open the app from their /my-apps.
Roles are defined by each app
There is no platform-wide catalogue of app-level roles. Each app declares its own. For example the Invoices app ships with:
- Admin — full access to the app, including its settings.
- Operator — create, edit, send and collect invoices but no settings changes.
- Viewer — read-only access to invoices and clients.
Other apps may declare different roles (a POS app might add a "Cashier", a scheduling app might add a "Coordinator"). The app's own documentation lists its full role catalogue.
Change a member's role inside an app
Same screen. The current role for each member is shown next to their name; pick a different one and save. The platform updates the assignment and emits an audit-log entry.
Revoke access
Same screen. Click Revoke next to a member. They lose access immediately and the app stops appearing in their /my-apps.
Activation requests from members
When a workspace member tries to open an app they don't have access to, the platform offers them a Request access flow. The request lands on the app's detail view (/my-apps/{slug}) where Owners and Admins can approve or deny. There is no separate inbox URL — requests show up inline with the rest of the app's access management.
Default at activation
When an Owner activates a new app on a workspace, only the Owner has access by default. Every other member needs to be added explicitly. There is no "grant access to everyone" toggle at activation today.